Definition
A scheme where attackers — including suspected nation-state actors — use AI-generated fake identities, resumes, and interview performances to get hired as remote IT workers or job candidates inside a target company. Once hired, they gain legitimate insider access that bypasses normal external security defenses entirely.
Why it matters
This turns hiring and HR into a security perimeter that boards must now govern, not just IT systems — traditional background checks and interviews are being defeated by AI-generated personas.